CyberSec.Space Logo
Back to CVE Browser

CVE-2004-0659

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0190%
EPSS Percentile14.72th
PublishedAug 6, 2004
Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name.

Affected Platforms (CPE)

📦
Mplayer

Mplayer

= 0.90
📦
Mplayer

Mplayer

= 0.90_pre
📦
Mplayer

Mplayer

= 0.90_rc
📦
Mplayer

Mplayer

= 0.90_rc4
📦
Mplayer

Mplayer

= 0.91
📦
Mplayer

Mplayer

= 0.92
📦
Mplayer

Mplayer

= 0.92.1
📦
Mplayer

Mplayer

= 0.92_cvs
📦
Mplayer

Mplayer

= 1.0_pre1
📦
Mplayer

Mplayer

= 1.0_pre2
📦
Mplayer

Mplayer

= 1.0_pre3
📦
Mplayer

Mplayer

= 1.0_pre3try2
📦
Mplayer

Mplayer

= 1.0_pre4
📦
Mplayer

Mplayer

= head_cvs

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=108844316930791&w=2
🔗 http://www.gentoo.org/security/en/glsa/glsa-200408-01.xml
🔗 http://www.securityfocus.com/bid/10615
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/16532
🔗 http://marc.info/?l=bugtraq&m=108844316930791&w=2
🔗 http://www.gentoo.org/security/en/glsa/glsa-200408-01.xml
🔗 http://www.securityfocus.com/bid/10615
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/16532

Related Vulnerabilities

CVE-2004-038610.0

Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary co...

CVE-2004-043310.0

Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-...

CVE-2004-118810.0

The pnm_get_chunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properl...

CVE-2004-118710.0

Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same cod...